Solution 2024/2025
Pepper
GCP Associate Cloud Engineer (ACE) Prep
What are the two appropriate types of GCP data storage / database for relational (structured columns & rows) data?
Answer: Cloud SQL (fully managed, good for web, structured frameworks & OLTP) & Cloud Spanner (good for
RDBMS+scale, HA, HTAP, mission critical, transactional consistency, global scale). Adtech, Financial Svcs, Global Supply
Chain.
What are the two appropriate types of GCP data storage / database for non-relational (may need to change the format
of data over time) data? Answer: Cloud Datastore (good for hierarchical, mobile, web ) & Cloud Bigtable (heavy read
+ write, events, fully managed, No-SQL wide-column database) Suitable for both low-latency single-point lookups and
precalculated analytics. IoT, Finance, Adtech, Geospatial datasets, Graphs
What is the appropriate type of GCP data storage for object data storage / database as binary large objects (blobs)?
Answer: Cloud Storage (good for binary or object data, such as images, binary media and backups)
What is the appropriate type of GCP storage for a data storage / data warehouse? Answer: BigQuery (enterprise
data warehouse used for analytics & dashboards). OLAP workloads up to one petabyte, big data exploration &
processing
Which VPC load balancer provides global, layer 7 load balancing & can route different URLs to different back ends? Also
can provide IPV6 termination. Answer: Global HTTP(s)
Which VPC load balancer provides global, layer 4 load balancing of non-HTTPS SSL traffic based on load & is supported
on specific port numbers? Also can provide IPV6 termination. Answer: Global SSL Proxy
Which VPC load balancer provides global, layer 4 load balancing of non-SSL TCP traffic & is supported on specific port
numbers? Also can provide IPV6 termination. Answer: Global TCP Proxy
Which VPC load balancer provides regional load balancing of any traffic (TCP, UDP) & is supported on any port numbers?
Answer: Regional
, Solution 2024/2025
Pepper
Which VPC load balancer provides regional load balancing of traffic (TCP, UDP) inside a VPC & is used for internal tiers of
multi-tier applications? Answer: Regional Internal
What are the three types of Cloud IAM roles? Answer: Primitive, Predefined and Custom
What command do you use to determine if one or more permissions are included in a primitive, predefined or custom
role? Answer: gcloud iam roles describe
What are the three GCP primitive roles (existed before Cloud IAM)? Answer: Owner, Editor and Viewer. These roles
are concentric; that is, the Owner role includes the permissions in the Editor role, and the Editor role includes the
permissions in the Viewer role.
What permissions does the Primitive Viewer role include? Answer: Permissions for read-only actions that do not
affect state, such as viewing (but not modifying) existing resources or data.
What permissions does the Primitive Editor role include? Answer: All viewer permissions, plus permissions for
actions that modify state, such as changing existing resources.
Note: While the roles/editor role contains permissions to create and delete resources for most Google Cloud services,
some services do not include these permissions.
What permissions does the Primitive Owner role include? Answer: All editor permissions and permissions for the
following actions:
-Manage roles and permissions for a project and all resources within the project.
-Set up billing for a project.
Note:
-Granting the owner role at a resource level, such as a Pub/Sub topic, doesn't grant the owner role on the parent
project.
-Granting the owner role at the organization level doesn't allow you to update the organization's metadata. However, it
allows you to modify projects and other resources under that organization.
-You can only add owners to a project using the Cloud Console (not the cloud IAM API or gcloud command).
, Solution 2024/2025
Pepper
Predefined 'Approver' Role (e.g., Access Approval Approver)? Answer: Ability to view or act on access approval
requests and view configuration
Predefined 'Configuration Editor' Role (e.g., Access Approval Config Editor)? Answer: Ability update the Access
Approval configuration
Predefined 'Viewer' Role (e.g., Access Approval Viewer)? Answer: Ability to view access approval requests and
configuration.
Predefined 'Manager Admin' Role (e.g., Access Context Manager Admin)? Answer: Full access to policies, access
levels, and access zones
Predefined 'Manager Editor' Role (e.g., Access Context Manager Editor)? Answer: Edit access to policies. Create,
edit, and change access levels and access zones.
Predefined 'Manager Reader' Role (e.g., Access Context Manager Reader)? Answer: Read access to policies, access
levels, and access zones.
Predefined 'Organization Admin' Role (e.g., Apigee Organization Admin)? Answer: Full access to all apigee resource
features
Predefined 'Analytics Agent' Role (e.g., Apigee Analytics Agent)? Answer: Curated set of permissions for Apigee
Universal Data Collection Agent to manage analytics for an Apigee Organization
Predefined 'Creator' Role (e.g., Apigee API Creator)? Answer: Creator of Apigee resources
Predefined 'Deployer' Role (e.g., Apigee Deployer)? Answer: Deployer of Apigee resources
Predefined 'Ready Only Admin' Role (e.g., Apigee Read-only Admin)? Answer: Viewer of all Apigee resources